Sign in Subscribe

Espionage

Intelligence-gathering operations, state-sponsored or otherwise, targeting government, corporate, or civil society organizations.

New Russia-Linked Threat Actor Uses AI to Supercharge Multi-Vector Attacks Against Ukraine

Threat Intelligence

New Russia-Linked Threat Actor Uses AI to Supercharge Multi-Vector Attacks Against Ukraine

GREYVIBE, a Russia-linked cluster, uses commercial AI like ChatGPT and Gemini to run five parallel attack chains against Ukrainian military, government, and civilian targets, deploying custom RATs and Android spyware.

Trending Topics

Operation CamelClone

Trending Topics

TRENDING TOPICS MAR 16, 2026 Operation CamelClone: Stealthy Multi‑Region Government Espionage

Surge In Cyber Threats - Middle East Activities

Threat Intelligence

Surge In Cyber Threats - Middle East Activities

Iran's IRGC- and MOIS-aligned APTs, including MuddyWater and OilRig, are running synchronized espionage, DDoS, and ICS/OT intrusions alongside hacktivist proxies during the Israel-Iran conflict, with confirmed access claims against Gulf energy and water utilities.

Defense Industrial Base Targeting and External Threat Exposure

Threat Intelligence

Defense Industrial Base Targeting and External Threat Exposure

Adversaries linked to Russia, China, Iran, and North Korea are targeting the defense industrial base through recruitment scams, secure-messaging takeovers, and end-of-support edge devices to gain long-dwell access to controlled technical data.

Trending Topics

Trending Topics

TRENDING TOPICS FEB 03, 2026 GlassWorm Supply Chain Attack Abuses Trusted Open

Trending Topics

Trending Topics

TRENDING TOPICS JAN 28, 2026 GitHub Repository Abuse Enables Malware Delivery Through

ConsentFix: MFA-Bypassing OAuth Phishing

Threat Intelligence

ConsentFix: MFA-Bypassing OAuth Phishing

ConsentFix lets attackers hijack Microsoft's own OAuth sign-in flow to steal authorization codes and bypass MFA entirely. Researchers link the technique with moderate-to-high confidence to Russia's APT29.

GRU Tradecraft and Network Edge Access

Threat Intelligence

GRU Tradecraft and Network Edge Access

A GRU-aligned team is abusing misconfigured, cloud-hosted network edge devices as passive listening posts, harvesting and replaying credentials into Western energy, logistics, and telecom networks without deploying any malware.

China’s Typhoon Tradecraft and Risk

Threat Intelligence

China’s Typhoon Tradecraft and Risk

China's Typhoon ecosystem spans distinct PRC clusters — Volt for infrastructure pre-positioning, Salt for telecom surveillance, Silk for supply-chain pivoting — all sharing a playbook of credential abuse and living-off-the-land persistence on unpatched edge devices.

eBPF-Based Rootkits

Threat Intelligence

eBPF-Based Rootkits

eBPF-based rootkits BPFDoor and Symbiote hide backdoor logic inside the Linux kernel's packet-filtering layer, giving state-linked operators years of undetected access to telecom and financial infrastructure with no open ports or visible processes.

Trending Topics

Session Smuggling

Trending Topics

TRENDING TOPICS NOV 03, 2025 Agent Session Smuggling: How Malicious AI Hijacks